last executing test programs: 38.478028472s ago: executing program 0 (id=1136): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500000700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r4, 0x0, 0x0}, 0x10) 36.071870886s ago: executing program 0 (id=1145): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r6, r7, 0x0) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x1d, 0x0, &(0x7f0000000380)="f8ad48cc02cb29fcc800775b08002dabf62bc3ed8b031c754209a0f9fd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.016701557s ago: executing program 0 (id=1150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 34.951325414s ago: executing program 0 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x35) memfd_create(0x0, 0x4) 34.015269081s ago: executing program 0 (id=1160): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000006c0)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) 32.918380706s ago: executing program 0 (id=1168): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_disconnect(r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000100), 0x0) 10.634270987s ago: executing program 3 (id=1244): r0 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x10) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0xc0182101, 0x0) sendmsg$tipc(r0, &(0x7f0000001480)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44000}, 0x4000) 9.126868299s ago: executing program 1 (id=1246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() tkill(r0, 0x41) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x46060480) 9.125892479s ago: executing program 2 (id=1247): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008d80402f000000000000109022400010000000009040000010300060009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x51, {[@main=@item_4={0x3, 0x0, 0x0, "4491ff73"}, @global=@item_4={0x3, 0x1, 0x0, "ca57f527"}]}}, 0x0}, 0x0) 9.125725509s ago: executing program 4 (id=1248): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(0x0, 0x4) 7.508456623s ago: executing program 1 (id=1249): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x0, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x1000000000000000) 7.508042063s ago: executing program 3 (id=1250): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0xa04108, &(0x7f0000000400)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}, {@nolazytime}, {@noquota}, {@jqfmt_vfsold}, {@minixdf}, {@nodiscard}, {@grpid}, {@debug}]}, 0x11, 0x4d8, &(0x7f0000000540)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10115, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100001) 7.507848643s ago: executing program 4 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000006940)={0x50, 0x0, r7, {0x7, 0x28, 0x10000000, 0x540ca0, 0x8001, 0x2000}}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) ioctl$FS_IOC_RESVSP(r6, 0x40086602, &(0x7f0000002740)) 5.799133569s ago: executing program 1 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3970b8090d64f40c}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.798747689s ago: executing program 2 (id=1253): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_targets\x00') read$FUSE(r4, &(0x7f0000008580)={0x2020}, 0xfffffef2) preadv(r4, &(0x7f0000000100), 0x0, 0xffffbdea, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_raw(r5, &(0x7f0000000240), 0x10) bind$can_raw(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff0701008014"], 0x118}], 0x1, 0x0, 0x0, 0x11}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000"], 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 5.797829729s ago: executing program 3 (id=1254): mkdir(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) sendfile(r0, 0xffffffffffffffff, &(0x7f0000002c80)=0x4, 0x7) socketpair(0x18, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b86dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x10048, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet(r4, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000640)="6ef77a030c03effa7dc50637e9e5c98a0a246bb54ea7c8a1dab0fa85486e43be1cabf3b4a45105527be043a6e28ac7ae5ef8dafcc527d0399ea6d2914afefa6ffbb3a8db7528ae156c983259d0fc88de1539e7b704200c4231865d9ff263ce748114ce5259771ebb1ff231867729770bc99b535bfffc10bfa27fa50782a2cb59b130b1ef2b732777dc2fb401065c571aed570fad7fda7464cdc6bf347a8c4c08151390535b52c8f8328d9054d5647f27dd934c04970f729b4a90e2dd71c80cd85ac9bf73858f8f67dbe202d4d39a9385a19afc32d0e71af1b702e63781b5ae12fa8befaded5eeca727", 0xe9}, {&(0x7f0000000740)="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", 0xda0}, {0x0}, {&(0x7f0000000240)="04dede68c694110aaeeb8df41ae0797cf5588389e62d14790caf2ca74c87", 0x1e}, {&(0x7f0000001740)}, {&(0x7f0000000280)="cbde47951926586b04f30f05ba108dcc4791117d534c236e454c7367c3cb67f85ff52dac", 0x24}, {&(0x7f0000002800)="3ba25994ed0fbaf11f0380e97da5b288f079843344cad9d5ae8683b04ea4195ca09fc40491ca74df97d1e87b575e66e5a8ae0e21f401d9b4046a1deedae6da5e9a2764c1c867ec9c74d17dc1927a553e68c414a0b91438e4206004ea94959ce3a0d5f0009fbd4dab32d21a61a8203e570bec04dde0bae867398ed3b42a244fb90bc6d397e05177e30eba505235bfd0af8adc89c1c90aea53e5f6dcddf3b4d736ec78c9e51711d1b0fe570e17b4ea283b2af97a83268ee5fc77a419a40abf92ba29f19713b98db7a8784e299262c117223be5ec869a32a176ef714212c31a3dab680ddb799596e72552418a89d4043e5fbb93e88d5b0404d5b2", 0xf9}, {&(0x7f0000002900)="8f177c76d328abf4474a72b31908f77da31e0fae0fe1ca51869067cd370d52aaa8ee67dfa89ac20ff61b6d321c19dd6ec6b0410b390be9c4c13ae2715edf2c00101296d925399de59faa76824aec7e6c4822824badd54880fa06b80bad54ccf076c48c2da3cd5cea85fce6be03f9e2cd5505dc0e250d39463e2aaa6a1335158d52df6b0fce8fb1e95f9034d11e6e44d39b0a4b65365ed456db43e0be4513dc", 0x9f}], 0x8, &(0x7f0000002ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xca, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @rr={0x7, 0x7, 0x5a, [@loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @private=0xa010100}}}], 0xd8}}], 0x1, 0x20004010) 5.797079749s ago: executing program 4 (id=1255): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) pread64(r3, &(0x7f00000000c0)=""/83, 0x4da, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 3.961513618s ago: executing program 1 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 3.961282788s ago: executing program 2 (id=1257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) flistxattr(r2, 0x0, 0x0) 3.961022068s ago: executing program 3 (id=1258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x28, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x20) r4 = add_key$fscrypt_v1(0x0, &(0x7f0000001200)={'fscrypt:', @desc2}, &(0x7f0000001240)={0x0, "395e11d96405de78b3fe92849d38e567229ebd4040a9d2fb8e0567c3f023006b3ef6594d3fa922b77ba398aaec8f9374162bc9b32bae4bd498d4243f33d69422"}, 0x48, 0xffffffffffffffff) keyctl$search(0x4, r4, 0x0, &(0x7f0000001300)={'syz', 0x3}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x4000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000400)) 3.960050818s ago: executing program 4 (id=1259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000001c0000000000001b6119600400004235fff69cfaaeed3f00"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) 3.904069044s ago: executing program 2 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) 2.0153032s ago: executing program 1 (id=1261): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x301040, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) 2.01486189s ago: executing program 2 (id=1262): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x0, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x1000000000000000) 2.01421496s ago: executing program 3 (id=1263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 2.01400657s ago: executing program 4 (id=1264): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0xa04108, &(0x7f0000000400)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}, {@nolazytime}, {@noquota}, {@jqfmt_vfsold}, {@minixdf}, {@nodiscard}, {@grpid}, {@debug}]}, 0x11, 0x4d8, &(0x7f0000000540)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10115, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100001) 2.55396ms ago: executing program 1 (id=1265): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=r3, @ANYBLOB="000000000800000005002700000000001c001a8018000a8014000700fc000000"], 0x44}}, 0x80) 1.947449ms ago: executing program 2 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() tkill(r0, 0x41) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x46060480) 1.048759ms ago: executing program 3 (id=1267): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_targets\x00') read$FUSE(r4, &(0x7f0000008580)={0x2020}, 0xfffffef2) preadv(r4, &(0x7f0000000100), 0x0, 0xffffbdea, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_raw(r5, &(0x7f0000000240), 0x10) bind$can_raw(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff0701008014"], 0x118}], 0x1, 0x0, 0x0, 0x11}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000"], 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 0s ago: executing program 4 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3970b8090d64f40c}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): em without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 79.092841][ T2127] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038 (0x7fffffff) [ 79.133239][ T2142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 79.455682][ T2154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 79.483704][ T2154] device wireguard0 entered promiscuous mode [ 79.575452][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.815439][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 79.832100][ T2158] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.848114][ T2160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=2160 comm=syz.2.614 [ 79.935510][ T6] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.943721][ T6] usb 4-1: config 0 has no interface number 0 [ 79.949889][ T6] usb 4-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 79.961630][ T6] usb 4-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 79.975005][ T6] usb 4-1: config 0 interface 1 has no altsetting 0 [ 80.135477][ T6] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 80.144331][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.152411][ T6] usb 4-1: Product: syz [ 80.156546][ T6] usb 4-1: Manufacturer: syz [ 80.160954][ T6] usb 4-1: SerialNumber: syz [ 80.170058][ T6] usb 4-1: config 0 descriptor?? [ 80.205408][ T798] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.354457][ T30] audit: type=1400 audit(1729593842.777:1119): avc: denied { create } for pid=2177 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 80.445490][ T798] usb 2-1: Using ep0 maxpacket: 32 [ 80.925476][ T798] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 80.934399][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.942180][ T798] usb 2-1: Product: syz [ 80.946167][ T798] usb 2-1: Manufacturer: syz [ 80.950566][ T798] usb 2-1: SerialNumber: syz [ 80.955520][ T798] usb 2-1: config 0 descriptor?? [ 81.005420][ T882] Bluetooth: hci0: command 0x1003 tx timeout [ 81.011296][ T2118] Bluetooth: hci0: sending frame failed (-49) [ 81.238839][ T2188] loop2: detected capacity change from 0 to 512 [ 81.305821][ T2188] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 81.326389][ T2188] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 81.334043][ T2188] System zones: 0-2, 18-18, 34-34 [ 81.340257][ T2188] EXT4-fs (loop2): 1 orphan inode deleted [ 81.345886][ T2188] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 81.367310][ T2188] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038 (0x7fffffff) [ 81.636703][ T798] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 81.673146][ T30] audit: type=1400 audit(1729593844.097:1120): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 81.693998][ T30] audit: type=1400 audit(1729593844.107:1121): avc: denied { search } for pid=139 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.715429][ T30] audit: type=1400 audit(1729593844.107:1122): avc: denied { read } for pid=139 comm="dhcpcd" name="n15" dev="tmpfs" ino=4067 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.736866][ T30] audit: type=1400 audit(1729593844.107:1123): avc: denied { open } for pid=139 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4067 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.759702][ T30] audit: type=1400 audit(1729593844.107:1124): avc: denied { getattr } for pid=139 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4067 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.782686][ T30] audit: type=1400 audit(1729593844.127:1125): avc: denied { read } for pid=2197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=296 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.836886][ T882] usb 2-1: USB disconnect, device number 4 [ 81.855478][ T139] net eth1: rx_urb submit failed: -19 [ 82.156594][ T322] usb 4-1: USB disconnect, device number 2 [ 82.572744][ T2233] loop3: detected capacity change from 0 to 40427 [ 82.625459][ T1447] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.665812][ T2233] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 82.673434][ T2233] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 82.682382][ T2233] F2FS-fs (loop3): invalid crc value [ 82.691955][ T2233] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.714108][ T2233] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 82.721019][ T2233] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.792790][ T1945] f2fs_fill_dentries: 4 callbacks suppressed [ 82.792807][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.798778][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.806230][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.813484][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.820938][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.828289][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.835681][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 82.985467][ T1447] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 83.001791][ T1447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.010229][ T1447] usb 3-1: config 0 descriptor?? [ 83.086337][ T882] Bluetooth: hci0: command 0x1001 tx timeout [ 83.092182][ T2118] Bluetooth: hci0: sending frame failed (-49) [ 83.215433][ T322] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.342642][ T2261] netlink: 52 bytes leftover after parsing attributes in process `syz.1.641'. [ 83.355562][ T1447] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.575495][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.586266][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.595839][ T322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.608523][ T322] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.617374][ T1447] usb 5-1: Using ep0 maxpacket: 32 [ 83.622303][ T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.630943][ T322] usb 4-1: config 0 descriptor?? [ 83.645558][ T882] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.735478][ T1447] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.885586][ T882] usb 2-1: Using ep0 maxpacket: 32 [ 83.905498][ T1447] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 83.914373][ T1447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.922198][ T1447] usb 5-1: Product: syz [ 83.926154][ T1447] usb 5-1: Manufacturer: syz [ 83.930557][ T1447] usb 5-1: SerialNumber: syz [ 83.935841][ T1447] usb 5-1: config 0 descriptor?? [ 84.035493][ T882] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 84.043432][ T882] usb 2-1: config 0 has no interface number 0 [ 84.175451][ T322] usbhid 4-1:0.0: can't add hid device: -71 [ 84.181258][ T322] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.188314][ T322] usb 4-1: USB disconnect, device number 3 [ 84.225578][ T882] usb 2-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=34.b4 [ 84.234496][ T882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.242313][ T882] usb 2-1: Product: syz [ 84.246283][ T882] usb 2-1: Manufacturer: syz [ 84.250658][ T882] usb 2-1: SerialNumber: syz [ 84.255633][ T882] usb 2-1: config 0 descriptor?? [ 84.606736][ T2270] tipc: Started in network mode [ 84.611420][ T2270] tipc: Node identity 101, cluster identity 4711 [ 84.617632][ T2270] tipc: Node number set to 257 [ 84.622221][ T2270] tipc: Cannot configure node identity twice [ 85.141936][ T60] usb 3-1: USB disconnect, device number 4 [ 85.165464][ T882] Bluetooth: hci0: command 0x1009 tx timeout [ 85.236883][ T882] usb 5-1: USB disconnect, device number 5 [ 85.245016][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 85.245030][ T30] audit: type=1400 audit(1729593847.667:1135): avc: denied { remount } for pid=2283 comm="syz.4.648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.309667][ T2289] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.650' sets config #15 [ 85.438831][ T2294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 85.575419][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.765456][ T882] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.015426][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 86.125485][ T882] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 86.135894][ T882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.145481][ T60] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 86.148716][ T882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.157561][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.166389][ T882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.174849][ T60] usb 3-1: config 0 descriptor?? [ 86.187469][ T882] usb 5-1: config 0 descriptor?? [ 86.229722][ T882] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 86.376473][ T882] usb 2-1: USB disconnect, device number 5 [ 87.016647][ T2313] loop3: detected capacity change from 0 to 512 [ 87.116793][ T2313] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.127646][ T2313] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 87.325673][ T882] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.685504][ T882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 87.855545][ T882] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.864398][ T882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.872226][ T882] usb 2-1: Product: syz [ 87.875421][ T1447] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.876211][ T882] usb 2-1: Manufacturer: syz [ 87.887937][ T882] usb 2-1: SerialNumber: syz [ 88.159196][ T798] usb 3-1: USB disconnect, device number 5 [ 88.275476][ T1447] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.285428][ T1447] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.385498][ T1447] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.394354][ T1447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.402272][ T1447] usb 4-1: SerialNumber: syz [ 88.512612][ T39] usb 5-1: USB disconnect, device number 6 [ 88.585560][ T798] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 88.785912][ T1447] usb 4-1: 0:2 : does not exist [ 88.790691][ T1447] usb 4-1: unit 255 not found! [ 88.795912][ T1447] usb 4-1: USB disconnect, device number 4 [ 88.871544][ T2343] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.878458][ T2343] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.885825][ T2343] device bridge_slave_0 entered promiscuous mode [ 88.892627][ T2343] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.899568][ T2343] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.906831][ T2343] device bridge_slave_1 entered promiscuous mode [ 88.945416][ T798] usb 3-1: Using ep0 maxpacket: 8 [ 88.963395][ T2343] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.970271][ T2343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.977355][ T2343] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.984117][ T2343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.003781][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.011044][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.015590][ T882] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 89.024262][ T882] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 89.031700][ T882] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 89.031856][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.044508][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.052850][ T386] tipc: Left network mode [ 89.065491][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.076531][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.077158][ T798] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 89.084547][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.093796][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.100145][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.116265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.116541][ T798] usb 3-1: config 0 descriptor?? [ 89.126725][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.135717][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.143441][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.152170][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.165909][ T798] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 89.176098][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.184755][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.192904][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.200416][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.210210][ T2343] device veth0_vlan entered promiscuous mode [ 89.224697][ T30] audit: type=1400 audit(1729593851.647:1136): avc: denied { ioctl } for pid=2350 comm="syz.3.669" path="socket:[21837]" dev="sockfs" ino=21837 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.227630][ T2343] device veth1_macvtap entered promiscuous mode [ 89.256232][ T882] cdc_ncm 2-1:1.0: setting tx_max = 36 [ 89.260271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.277195][ T882] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 89.301353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.333478][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.409292][ T798] usb 3-1: USB disconnect, device number 6 [ 89.651542][ T2366] loop3: detected capacity change from 0 to 512 [ 89.674668][ T322] usb 2-1: USB disconnect, device number 6 [ 89.680756][ T322] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 89.716330][ T2366] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.727218][ T2366] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 89.886528][ T386] device bridge_slave_1 left promiscuous mode [ 89.892599][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.900934][ T386] device bridge_slave_0 left promiscuous mode [ 89.907203][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.916572][ T386] device veth1_macvtap left promiscuous mode [ 89.922472][ T386] device veth0_vlan left promiscuous mode [ 89.995437][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.204408][ T2407] netlink: 'syz.3.677': attribute type 4 has an invalid length. [ 90.213570][ T2407] netlink: 17 bytes leftover after parsing attributes in process `syz.3.677'. [ 90.223521][ T2407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 90.248994][ T30] audit: type=1400 audit(1729593852.677:1137): avc: denied { map } for pid=2412 comm="syz.1.680" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.362123][ T798] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 [ 90.370349][ T798] hid-generic: probe of 0000:0000:0000.0003 failed with error -22 [ 90.386634][ T60] usb 5-1: config 0 has no interfaces? [ 90.711119][ T2433] loop2: detected capacity change from 0 to 512 [ 90.755469][ T60] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 90.764375][ T30] audit: type=1400 audit(1729593853.187:1138): avc: denied { nlmsg_write } for pid=2434 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.786929][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.797881][ T60] usb 5-1: Product: syz [ 90.802037][ T60] usb 5-1: Manufacturer: syz [ 90.806662][ T60] usb 5-1: SerialNumber: syz [ 90.812007][ T2433] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.812287][ T60] usb 5-1: config 0 descriptor?? [ 90.823083][ T2433] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff) [ 90.848710][ T2441] SELinux: Context is not valid (left unmapped). [ 91.104003][ T2369] UDC core: couldn't find an available UDC or it's busy: -16 [ 91.114582][ T2369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.147803][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.272412][ T30] audit: type=1400 audit(1729593853.697:1139): avc: denied { set_context_mgr } for pid=2457 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.302582][ T2460] loop1: detected capacity change from 0 to 2048 [ 91.317780][ T30] audit: type=1400 audit(1729593853.747:1140): avc: denied { read } for pid=2455 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.350689][ T2460] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.361304][ T2460] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038 (0x7fffffff) [ 91.406248][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 91.525648][ T39] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 91.533622][ T39] usb 4-1: config 0 has no interface number 0 [ 91.550647][ T39] usb 4-1: config 0 interface 224 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 91.560989][ T39] usb 4-1: config 0 interface 224 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 91.791573][ T39] usb 4-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=ea.ac [ 91.801247][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.810378][ T39] usb 4-1: Product: syz [ 91.814884][ T39] usb 4-1: Manufacturer: syz [ 91.820308][ T39] usb 4-1: SerialNumber: syz [ 91.831532][ T39] usb 4-1: config 0 descriptor?? [ 91.855662][ T2443] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.863135][ T2443] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.079078][ T60] usb 4-1: USB disconnect, device number 5 [ 92.403691][ T322] usb 5-1: USB disconnect, device number 7 [ 93.044909][ T2494] loop4: detected capacity change from 0 to 512 [ 93.113720][ T2507] loop3: detected capacity change from 0 to 2048 [ 93.142896][ T2494] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.153809][ T2494] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038 (0x7fffffff) [ 93.174598][ T2507] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.187926][ T2507] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 93.349070][ T60] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 93.364012][ T2515] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 93.865446][ T60] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 93.875087][ T60] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 94.011323][ T30] audit: type=1400 audit(1729593856.437:1141): avc: denied { bind } for pid=2533 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.011405][ T2534] device syz_tun entered promiscuous mode [ 94.114662][ T2534] device syz_tun left promiscuous mode [ 94.226667][ T60] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 94.235689][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.261917][ T60] usb 3-1: Product: syz [ 94.301198][ T60] usb 3-1: Manufacturer: syz [ 94.305884][ T60] usb 3-1: SerialNumber: syz [ 94.313628][ T60] usb 3-1: config 0 descriptor?? [ 94.335453][ T2491] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.342996][ T2491] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.556640][ T2491] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.563824][ T2491] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.675673][ T2560] overlayfs: unrecognized mount option "/" or missing value [ 94.684958][ T2560] loop3: detected capacity change from 0 to 512 [ 94.715531][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 94.728430][ T2560] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.945627][ T2560] EXT4-fs (loop3): 1 truncate cleaned up [ 94.951134][ T2560] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 95.006072][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 95.235454][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 95.435455][ T39] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 95.444367][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.452414][ T39] usb 2-1: Product: syz [ 95.474345][ T39] usb 2-1: Manufacturer: syz [ 95.479053][ T39] usb 2-1: SerialNumber: syz [ 95.487939][ T2571] tipc: Started in network mode [ 95.492610][ T2571] tipc: Node identity 101, cluster identity 4711 [ 95.499080][ T2571] tipc: Node number set to 257 [ 95.499255][ T39] usb 2-1: config 0 descriptor?? [ 95.509145][ T2571] tipc: Cannot configure node identity twice [ 96.468203][ T2596] loop0: detected capacity change from 0 to 512 [ 96.548844][ T39] usb 2-1: USB disconnect, device number 7 [ 96.630915][ T2596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.642580][ T2596] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 96.755412][ T322] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 96.785629][ T60] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 96.999637][ T60] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 97.010646][ T2608] loop0: detected capacity change from 0 to 2048 [ 97.012411][ T60] usb 3-1: USB disconnect, device number 7 [ 97.024036][ T60] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 97.038522][ T2608] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.049024][ T2608] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 97.103460][ T2612] tipc: Started in network mode [ 97.108192][ T2612] tipc: Node identity 101, cluster identity 4711 [ 97.114290][ T2612] tipc: Node number set to 257 [ 97.118974][ T2612] tipc: Cannot configure node identity twice [ 97.136140][ T2614] capability: warning: `syz.1.749' uses 32-bit capabilities (legacy support in use) [ 97.146263][ T30] audit: type=1400 audit(1729593859.577:1142): avc: denied { create } for pid=2613 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.174263][ T2617] overlayfs: unrecognized mount option "/" or missing value [ 97.183545][ T2617] loop1: detected capacity change from 0 to 512 [ 97.195409][ T322] usb 5-1: Using ep0 maxpacket: 8 [ 97.235922][ T2617] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.247204][ T2617] EXT4-fs (loop1): 1 truncate cleaned up [ 97.252707][ T2617] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 97.315537][ T322] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 97.324461][ T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.568858][ T1447] usb 5-1: USB disconnect, device number 8 [ 97.576665][ T2622] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 97.586241][ T2622] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 97.603756][ T30] audit: type=1400 audit(1729593860.027:1143): avc: denied { connect } for pid=2624 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.622994][ T60] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 98.045406][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 98.372864][ T60] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.635508][ T60] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 98.644462][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.652228][ T60] usb 3-1: Product: syz [ 98.656272][ T60] usb 3-1: Manufacturer: syz [ 98.660598][ T60] usb 3-1: SerialNumber: syz [ 98.665797][ T60] usb 3-1: config 0 descriptor?? [ 98.914123][ T1447] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.930981][ T30] audit: type=1400 audit(1729593861.357:1144): avc: denied { create } for pid=2654 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.165431][ T1447] usb 5-1: Using ep0 maxpacket: 16 [ 99.285459][ T1447] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.299384][ T1447] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.309646][ T2664] loop1: detected capacity change from 0 to 40427 [ 99.316178][ T1447] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 99.335064][ T1447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.346455][ T1447] usb 5-1: config 0 descriptor?? [ 99.356223][ T2664] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 99.363867][ T2664] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.373257][ T2664] F2FS-fs (loop1): invalid crc value [ 99.380084][ T2664] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.418277][ T2664] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.425838][ T2664] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.495485][ T2674] overlayfs: unrecognized mount option "/" or missing value [ 99.519401][ T2674] loop3: detected capacity change from 0 to 512 [ 99.541832][ T2674] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.565764][ T2674] EXT4-fs (loop3): 1 truncate cleaned up [ 99.571227][ T2674] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 99.611597][ T335] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 99.611620][ T335] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 99.619225][ T335] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 99.626993][ T335] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 99.635450][ T335] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 99.642889][ T335] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 99.651093][ T335] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 99.936707][ T882] usb 3-1: USB disconnect, device number 8 [ 99.938236][ T1447] hid-generic 0003:060B:500A.0004: unexpected long global item [ 99.957315][ T1447] hid-generic: probe of 0003:060B:500A.0004 failed with error -22 [ 100.086128][ T798] usb 5-1: USB disconnect, device number 9 [ 100.765420][ T1447] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.961319][ T2705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2705 comm=syz.2.774 [ 101.128743][ T2713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 101.148668][ T2716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.778'. [ 101.416055][ T2727] overlayfs: unrecognized mount option "/" or missing value [ 101.426672][ T2727] loop1: detected capacity change from 0 to 512 [ 101.436249][ T2727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.445441][ T1447] usb 1-1: Using ep0 maxpacket: 8 [ 101.453423][ T2727] EXT4-fs (loop1): 1 truncate cleaned up [ 101.459419][ T2727] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 101.565451][ T1447] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.579305][ T1447] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.592186][ T1447] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 101.601117][ T1447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.609553][ T1447] usb 1-1: config 0 descriptor?? [ 102.030853][ T1447] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 102.105407][ T882] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.447601][ T1447] usb 1-1: USB disconnect, device number 4 [ 102.495412][ T882] usb 4-1: Using ep0 maxpacket: 16 [ 102.635687][ T882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.835439][ T882] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 102.844469][ T882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.852832][ T882] usb 4-1: Product: syz [ 102.856809][ T882] usb 4-1: Manufacturer: syz [ 102.861213][ T882] usb 4-1: SerialNumber: syz [ 102.866244][ T882] usb 4-1: config 0 descriptor?? [ 102.908424][ T2767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.795'. [ 102.965424][ T1447] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.974838][ T2771] overlayfs: unrecognized mount option "/" or missing value [ 102.987153][ T2771] loop0: detected capacity change from 0 to 512 [ 103.070717][ T2771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.129371][ T2771] EXT4-fs (loop0): 1 truncate cleaned up [ 103.135345][ T2771] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 103.285754][ T882] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 103.292551][ T882] usb 4-1: No valid video chain found. [ 103.306252][ T882] usb 4-1: USB disconnect, device number 6 [ 103.729057][ T1447] usb 2-1: config 0 has no interfaces? [ 103.905564][ T1447] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 103.961864][ T1447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.989326][ T1447] usb 2-1: Product: syz [ 104.080889][ T1447] usb 2-1: Manufacturer: syz [ 104.132822][ T1447] usb 2-1: SerialNumber: syz [ 104.215453][ T882] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.245562][ T1447] usb 2-1: config 0 descriptor?? [ 104.360007][ T2834] device pim6reg1 entered promiscuous mode [ 104.467049][ T30] audit: type=1400 audit(1729593866.897:1145): avc: denied { create } for pid=2837 comm="syz.2.823" dev="anon_inodefs" ino=23470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.493135][ T30] audit: type=1400 audit(1729593866.917:1146): avc: denied { ioctl } for pid=2837 comm="syz.2.823" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23470 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.525403][ T882] usb 5-1: Using ep0 maxpacket: 16 [ 104.571311][ T2838] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 104.596189][ T2854] loop3: detected capacity change from 0 to 512 [ 104.641624][ T2854] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 104.656456][ T2854] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 104.664161][ T2854] System zones: 0-2, 18-18, 34-34 [ 104.665461][ T882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.681189][ T2854] EXT4-fs (loop3): 1 orphan inode deleted [ 104.686863][ T2854] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 104.708484][ T2854] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 104.746192][ T2875] tap0: tun_chr_ioctl cmd 1074025681 [ 104.885447][ T882] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 104.894449][ T882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.905536][ T882] usb 5-1: Product: syz [ 104.909640][ T882] usb 5-1: Manufacturer: syz [ 104.914131][ T882] usb 5-1: SerialNumber: syz [ 104.944986][ T882] usb 5-1: config 0 descriptor?? [ 104.953719][ T2887] loop0: detected capacity change from 0 to 16 [ 105.007866][ T2887] erofs: (device loop0): mounted with root inode @ nid 36. [ 105.305405][ T20] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 105.345448][ T882] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 105.351686][ T882] usb 5-1: No valid video chain found. [ 105.359425][ T882] usb 5-1: USB disconnect, device number 10 [ 105.855548][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.867265][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.877134][ T20] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 105.886225][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.894653][ T20] usb 3-1: config 0 descriptor?? [ 105.960414][ T2920] syz.0.858[2920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.960458][ T2920] syz.0.858[2920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.295404][ T882] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.367831][ T20] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 106.535523][ T2949] netlink: 'syz.3.870': attribute type 3 has an invalid length. [ 106.555414][ T882] usb 5-1: Using ep0 maxpacket: 16 [ 106.620202][ T20] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 106.628497][ T20] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 106.680940][ T20] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71 [ 106.693429][ T20] usb 3-1: USB disconnect, device number 9 [ 106.700258][ T60] usb 2-1: USB disconnect, device number 8 [ 106.700359][ T2951] overlayfs: unrecognized mount option "/" or missing value [ 106.713142][ T882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.717908][ T2951] loop1: detected capacity change from 0 to 512 [ 106.805858][ T2951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.816919][ T2951] EXT4-fs (loop1): 1 truncate cleaned up [ 106.822499][ T2951] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 106.901816][ T2954] netlink: 36 bytes leftover after parsing attributes in process `syz.0.872'. [ 106.961621][ T882] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 106.970545][ T882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.978576][ T882] usb 5-1: Product: syz [ 106.982618][ T882] usb 5-1: Manufacturer: syz [ 106.987093][ T882] usb 5-1: SerialNumber: syz [ 107.354507][ T882] usb 5-1: config 0 descriptor?? [ 107.373463][ T2964] device pim6reg1 entered promiscuous mode [ 107.471233][ T2970] loop2: detected capacity change from 0 to 512 [ 107.685755][ T882] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 107.704776][ T882] usb 5-1: No valid video chain found. [ 107.717557][ T2970] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 107.736848][ T882] usb 5-1: USB disconnect, device number 11 [ 107.788023][ T2970] ext4 filesystem being mounted at /188/bus supports timestamps until 2038 (0x7fffffff) [ 107.875295][ T2983] loop0: detected capacity change from 0 to 512 [ 107.965740][ T2983] EXT4-fs (loop0): Ignoring removed orlov option [ 107.975234][ T2983] EXT4-fs (loop0): Test dummy encryption mode enabled [ 107.986823][ T2983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 107.995316][ T2983] System zones: 1-12 [ 108.003953][ T2983] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.881: casefold flag without casefold feature [ 108.018396][ T2983] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.881: couldn't read orphan inode 15 (err -117) [ 108.035884][ T2983] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 108.903377][ T2993] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 108.914477][ T2993] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 109.427198][ T3013] loop2: detected capacity change from 0 to 512 [ 109.515682][ T3013] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.527330][ T3013] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038 (0x7fffffff) [ 109.622995][ T3021] loop0: detected capacity change from 0 to 16 [ 109.632647][ T3021] erofs: (device loop0): mounted with root inode @ nid 36. [ 109.678449][ T3021] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 109.688046][ T3021] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -27 in[61, 4035] out[1851] [ 109.700469][ T3021] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 109.816762][ T3026] loop1: detected capacity change from 0 to 512 [ 109.952853][ T3026] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 109.966218][ T3026] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038 (0x7fffffff) [ 110.061766][ T30] audit: type=1400 audit(1729593872.487:1147): avc: denied { setattr } for pid=3025 comm="syz.1.892" path="/170/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.326022][ T3030] loop3: detected capacity change from 0 to 40427 [ 110.446761][ T3030] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 110.484405][ T3030] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 110.566260][ T3030] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 110.625632][ T3030] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 110.635419][ T3030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.267668][ T30] audit: type=1400 audit(1729593873.697:1148): avc: denied { bind } for pid=3043 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.635435][ T320] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 111.680069][ T30] audit: type=1400 audit(1729593874.107:1149): avc: denied { read write } for pid=3065 comm="syz.3.902" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.709862][ T30] audit: type=1400 audit(1729593874.107:1150): avc: denied { open } for pid=3065 comm="syz.3.902" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.900687][ T3078] loop2: detected capacity change from 0 to 16 [ 111.907324][ T320] usb 5-1: Using ep0 maxpacket: 16 [ 112.008741][ T3078] erofs: (device loop2): mounted with root inode @ nid 36. [ 112.018996][ T3075] attempt to access beyond end of device [ 112.018996][ T3075] loop2: rw=0, want=32, limit=16 [ 112.029530][ T3075] attempt to access beyond end of device [ 112.029530][ T3075] loop2: rw=0, want=32, limit=16 [ 112.075682][ T320] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 112.089669][ T320] usb 5-1: config 0 has no interface number 0 [ 112.100062][ T320] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 112.285447][ T320] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 112.300298][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.308359][ T320] usb 5-1: Product: syz [ 112.312374][ T320] usb 5-1: Manufacturer: syz [ 112.316809][ T320] usb 5-1: SerialNumber: syz [ 112.334353][ T320] usb 5-1: config 0 descriptor?? [ 112.365841][ T3061] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.441910][ T3086] loop3: detected capacity change from 0 to 512 [ 112.514673][ T3086] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.526628][ T3086] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038 (0x7fffffff) [ 112.650390][ T320] usb 5-1: USB disconnect, device number 12 [ 112.961120][ T2814] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 113.212023][ T3099] loop3: detected capacity change from 0 to 40427 [ 113.315712][ T3099] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 113.323371][ T3099] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.333160][ T3099] F2FS-fs (loop3): invalid crc value [ 113.341906][ T3099] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.375426][ T2814] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 113.385983][ T2814] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 113.492950][ T3099] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.500318][ T3099] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.625520][ T2814] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 113.634433][ T2814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.642229][ T2814] usb 3-1: Product: syz [ 113.646228][ T2814] usb 3-1: Manufacturer: syz [ 113.650767][ T2814] usb 3-1: SerialNumber: syz [ 113.682334][ T2814] usb 3-1: config 0 descriptor?? [ 113.916509][ T3115] loop1: detected capacity change from 0 to 2048 [ 113.940724][ T2814] usb 3-1: USB disconnect, device number 10 [ 113.952939][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 113.952952][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 113.960511][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 113.968046][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 113.975837][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 113.983191][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 113.990659][ T1945] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 113.997207][ T3115] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.821184][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 115.041966][ T3137] loop1: detected capacity change from 0 to 1024 [ 115.147396][ T3137] EXT4-fs (loop1): Ignoring removed bh option [ 115.164653][ T3137] EXT4-fs (loop1): Unrecognized mount option "obj_user=resuid" or missing value [ 115.337791][ T3141] loop0: detected capacity change from 0 to 40427 [ 115.448945][ T3141] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 115.467044][ T3141] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 115.577291][ T3141] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 115.586792][ T3141] F2FS-fs (loop0): invalid crc value [ 115.593555][ T3141] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.652256][ T3141] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 115.663993][ T3141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.818417][ T3159] loop0: detected capacity change from 0 to 128 [ 115.829130][ T3159] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.837485][ T3159] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 115.850043][ T3159] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038 (0x7fffffff) [ 115.991222][ T3165] loop1: detected capacity change from 0 to 2048 [ 116.153132][ T3168] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 116.235163][ T3165] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.390054][ T3185] loop3: detected capacity change from 0 to 512 [ 117.851330][ T3196] xt_CT: No such helper "netbios-ns" [ 118.593330][ T3198] loop0: detected capacity change from 0 to 512 [ 118.618176][ T3199] loop4: detected capacity change from 0 to 2048 [ 118.626440][ T3185] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.639630][ T3185] ext4 filesystem being mounted at /102/bus supports timestamps until 2038 (0x7fffffff) [ 118.662582][ T3198] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 118.738031][ T3199] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.749348][ T3198] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 118.755753][ T3199] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038 (0x7fffffff) [ 118.757026][ T3198] System zones: 0-2, 18-18, 34-34 [ 118.774266][ T3198] EXT4-fs (loop0): 1 orphan inode deleted [ 118.780450][ T3198] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 118.802080][ T3198] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038 (0x7fffffff) [ 119.043664][ T3215] loop1: detected capacity change from 0 to 512 [ 119.129670][ T3215] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.152333][ T3219] loop3: detected capacity change from 0 to 1024 [ 119.174461][ T3215] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 119.189570][ T3215] EXT4-fs (loop1): 1 truncate cleaned up [ 119.195062][ T3215] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.208944][ T3219] EXT4-fs (loop3): Ignoring removed orlov option [ 119.216104][ T3219] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 119.299033][ T3219] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 119.400995][ T30] audit: type=1400 audit(1729593881.817:1151): avc: denied { validate_trans } for pid=3213 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 120.313238][ T3256] loop2: detected capacity change from 0 to 512 [ 120.320431][ T30] audit: type=1400 audit(1729593882.737:1152): avc: denied { call } for pid=3243 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 120.425432][ T30] audit: type=1400 audit(1729593882.737:1153): avc: denied { transfer } for pid=3243 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 120.444429][ T30] audit: type=1400 audit(1729593882.847:1154): avc: denied { unlink } for pid=3248 comm="syz.1.945" name="#20" dev="tmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.470474][ T3256] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.481467][ T3256] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038 (0x7fffffff) [ 121.062947][ T3270] loop1: detected capacity change from 0 to 2048 [ 121.132958][ T3276] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 121.140468][ T3276] netlink: 17 bytes leftover after parsing attributes in process `syz.2.948'. [ 121.167792][ T3276] loop2: detected capacity change from 0 to 256 [ 121.411293][ T3270] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.417290][ T3282] loop3: detected capacity change from 0 to 512 [ 121.427897][ T3270] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038 (0x7fffffff) [ 121.556488][ T3282] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 121.572448][ T3282] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 121.585427][ T3282] System zones: 0-1, 15-15, 18-18, 34-34 [ 121.591426][ T3282] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.597718][ T3282] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 121.606936][ T3282] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 121.619325][ T3269] loop0: detected capacity change from 0 to 40427 [ 121.621408][ T3282] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 121.634259][ T3282] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.953: bad orphan inode 16 [ 121.644248][ T3269] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 121.644374][ T3282] ext4_test_bit(bit=15, block=18) = 1 [ 121.654933][ T3269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.656163][ T3282] is_bad_inode(inode)=0 [ 121.668038][ T3282] NEXT_ORPHAN(inode)=0 [ 121.668329][ T3274] loop4: detected capacity change from 0 to 40427 [ 121.671890][ T3282] max_ino=32 [ 121.681215][ T3282] i_nlink=2 [ 121.684126][ T3282] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.693500][ T3274] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 121.702653][ T3274] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 121.711645][ T3269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.753720][ T3269] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 121.759240][ T3274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 121.760790][ T3269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.789502][ T30] audit: type=1400 audit(1729593884.217:1155): avc: denied { ioctl } for pid=3268 comm="syz.0.949" path="/54/file2/file1" dev="loop0" ino=10 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.798157][ T3274] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 121.820245][ T3274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.652006][ T3300] loop2: detected capacity change from 0 to 512 [ 122.663700][ T2343] attempt to access beyond end of device [ 122.663700][ T2343] loop0: rw=524288, want=45072, limit=40427 [ 122.680054][ T2343] attempt to access beyond end of device [ 122.680054][ T2343] loop0: rw=0, want=45072, limit=40427 [ 122.709031][ T333] attempt to access beyond end of device [ 122.709031][ T333] loop0: rw=2049, want=40992, limit=40427 [ 122.750366][ T3300] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 122.894019][ T3300] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 122.901684][ T3300] System zones: 0-2, 18-18, 34-34 [ 122.940037][ T3300] EXT4-fs (loop2): 1 orphan inode deleted [ 122.946500][ T3300] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 123.117686][ T3312] loop1: detected capacity change from 0 to 512 [ 123.147613][ T3300] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038 (0x7fffffff) [ 123.157752][ T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.157770][ T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.166604][ T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.174442][ T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.191567][ T3312] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.191716][ T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.199437][ T3312] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038 (0x7fffffff) [ 123.227020][ T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.227036][ T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.382117][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.415598][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.430539][ T3318] device bridge_slave_0 entered promiscuous mode [ 123.454505][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.475747][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.510467][ T3318] device bridge_slave_1 entered promiscuous mode [ 123.566296][ T333] device bridge_slave_1 left promiscuous mode [ 123.572416][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.586733][ T333] device bridge_slave_0 left promiscuous mode [ 123.592822][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.601390][ T333] device veth1_macvtap left promiscuous mode [ 123.607406][ T333] device veth0_vlan left promiscuous mode [ 123.817809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.822727][ T30] audit: type=1400 audit(1729593886.247:1156): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.850154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.900346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.912886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.922025][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.928874][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.011518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.040300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.049926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.058084][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.059169][ T3336] loop2: detected capacity change from 0 to 2048 [ 124.065005][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.078654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.087178][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.099991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.102196][ T3336] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.118485][ T3336] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038 (0x7fffffff) [ 124.122950][ T3318] device veth0_vlan entered promiscuous mode [ 124.153596][ T3318] device veth1_macvtap entered promiscuous mode [ 124.195485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.213960][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.224050][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.232933][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.241139][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.250015][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.261207][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.499163][ T3352] loop4: detected capacity change from 0 to 512 [ 124.598530][ T3352] EXT4-fs (loop4): Test dummy encryption mode enabled [ 124.613416][ T3352] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz.4.968: casefold flag without casefold feature [ 124.616862][ T3355] netlink: 87 bytes leftover after parsing attributes in process `syz.3.969'. [ 124.626472][ T3352] EXT4-fs (loop4): get root inode failed [ 124.640551][ T3352] EXT4-fs (loop4): mount failed [ 124.734276][ T30] audit: type=1400 audit(1729593887.157:1157): avc: denied { remount } for pid=3360 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.774159][ T3361] loop0: detected capacity change from 0 to 512 [ 124.831140][ T3361] EXT4-fs (loop0): Ignoring removed nobh option [ 124.837901][ T3361] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.856860][ T3361] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 124.876295][ T3361] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 124.896917][ T3361] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.973: bg 0: block 224: padding at end of block bitmap is not set [ 125.087045][ T3361] EXT4-fs (loop0): Remounting filesystem read-only [ 125.088071][ T3369] loop2: detected capacity change from 0 to 512 [ 125.093426][ T3361] EXT4-fs error (device loop0) in ext4_evict_inode:258: Readonly filesystem [ 125.150287][ T3369] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.161214][ T3369] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038 (0x7fffffff) [ 125.186853][ T8] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 125.204024][ T8] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 125.225410][ T30] audit: type=1400 audit(1729593887.647:1158): avc: denied { getopt } for pid=3375 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.245439][ T320] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.427260][ T3383] device veth0_vlan left promiscuous mode [ 125.435406][ T3383] device veth0_vlan entered promiscuous mode [ 125.630330][ T3385] loop4: detected capacity change from 0 to 512 [ 125.651184][ T3385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.662247][ T3385] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038 (0x7fffffff) [ 125.737103][ T320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.779096][ T320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.034618][ T320] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.060352][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.193565][ T320] usb 4-1: SerialNumber: syz [ 126.291645][ T3396] loop0: detected capacity change from 0 to 256 [ 126.330725][ T3396] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 126.361290][ T30] audit: type=1400 audit(1729593888.787:1159): avc: denied { remove_name } for pid=3395 comm="syz.0.980" name="file1" dev="loop0" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.385189][ T30] audit: type=1400 audit(1729593888.807:1160): avc: denied { rename } for pid=3395 comm="syz.0.980" name="file1" dev="loop0" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.409400][ T30] audit: type=1400 audit(1729593888.837:1161): avc: denied { read write open } for pid=3395 comm="syz.0.980" path="/3/bus/file1" dev="loop0" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.482231][ T3405] tipc: Started in network mode [ 126.487265][ T3405] tipc: Node identity 101, cluster identity 4711 [ 126.493526][ T3405] tipc: Node number set to 257 [ 126.498984][ T3405] tipc: Cannot configure node identity twice [ 126.628250][ T3416] loop2: detected capacity change from 0 to 512 [ 127.438372][ T3416] EXT4-fs (loop2): 1 orphan inode deleted [ 127.540579][ T3416] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.566116][ T3416] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038 (0x7fffffff) [ 127.588302][ T3426] loop1: detected capacity change from 0 to 512 [ 127.602246][ T3428] loop4: detected capacity change from 0 to 512 [ 128.246924][ T3428] EXT4-fs (loop4): 1 orphan inode deleted [ 128.257616][ T3428] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.268753][ T3428] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038 (0x7fffffff) [ 128.289315][ T3426] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 128.320373][ T3426] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038 (0x7fffffff) [ 128.417438][ T320] usb 4-1: skipping empty audio interface (v1) [ 128.455550][ T320] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 128.488791][ T320] usb 4-1: USB disconnect, device number 7 [ 128.895422][ T30] audit: type=1400 audit(1729593891.177:1162): avc: denied { ioctl } for pid=3446 comm="syz.2.996" path="socket:[26033]" dev="sockfs" ino=26033 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.383958][ T3467] loop4: detected capacity change from 0 to 512 [ 129.612263][ T3467] EXT4-fs (loop4): 1 orphan inode deleted [ 129.631615][ T3467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.666422][ T3467] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038 (0x7fffffff) [ 129.970505][ T3481] loop1: detected capacity change from 0 to 1024 [ 130.107568][ T3481] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.205434][ T3481] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 130.226560][ T3481] JBD2: no valid journal superblock found [ 130.244547][ T3486] loop2: detected capacity change from 0 to 2048 [ 130.250837][ T3481] EXT4-fs (loop1): error loading journal [ 130.401479][ T3490] device pim6reg1 entered promiscuous mode [ 130.414364][ T3486] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.524523][ T3498] loop1: detected capacity change from 0 to 512 [ 130.572743][ T3498] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.583752][ T3498] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038 (0x7fffffff) [ 131.245391][ T1447] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.268468][ T3523] loop2: detected capacity change from 0 to 256 [ 131.326044][ T3523] FAT-fs (loop2): bogus number of FAT sectors [ 131.332038][ T3523] FAT-fs (loop2): Can't find a valid FAT filesystem [ 131.879847][ T30] audit: type=1400 audit(1729593894.297:1163): avc: denied { map } for pid=3529 comm="syz.4.1020" path="socket:[26139]" dev="sockfs" ino=26139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 132.095827][ T30] audit: type=1400 audit(1729593894.467:1164): avc: denied { write } for pid=3535 comm="syz.1.1021" path="socket:[26144]" dev="sockfs" ino=26144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.195465][ T1447] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.209283][ T1447] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.218939][ T1447] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 132.228166][ T1447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.241375][ T1447] usb 4-1: config 0 descriptor?? [ 132.880129][ T30] audit: type=1400 audit(1729593895.167:1165): avc: denied { shutdown } for pid=3546 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.037570][ T3560] loop4: detected capacity change from 0 to 16 [ 133.077772][ T3560] erofs: (device loop4): mounted with root inode @ nid 36. [ 133.087324][ T3560] attempt to access beyond end of device [ 133.087324][ T3560] loop4: rw=0, want=32, limit=16 [ 133.098387][ T3560] attempt to access beyond end of device [ 133.098387][ T3560] loop4: rw=0, want=32, limit=16 [ 133.220348][ T882] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.228984][ T1447] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 133.503297][ T3568] usb usb8: usbfs: process 3568 (syz.0.1031) did not claim interface 0 before use [ 133.554660][ T1447] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 133.562919][ T1447] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 133.707714][ T1447] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -71 [ 133.715699][ T1447] usb 4-1: USB disconnect, device number 8 [ 133.865678][ T882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.877780][ T882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.888946][ T882] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 133.898757][ T882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.143206][ T3584] loop0: detected capacity change from 0 to 1024 [ 134.148369][ T882] usb 2-1: config 0 descriptor?? [ 134.157770][ T3584] EXT4-fs (loop0): Ignoring removed orlov option [ 134.166632][ T3584] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000004,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 134.709652][ T30] audit: type=1400 audit(1729593897.107:1166): avc: denied { read } for pid=3594 comm="syz.0.1040" name="usbmon0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.760186][ T882] pantherlord 0003:0F30:0111.0007: item fetching failed at offset 6/7 [ 134.828206][ T30] audit: type=1400 audit(1729593897.107:1167): avc: denied { open } for pid=3594 comm="syz.0.1040" path="/dev/usbmon0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.861078][ T882] pantherlord 0003:0F30:0111.0007: parse failed [ 134.934829][ T3591] loop3: detected capacity change from 0 to 40427 [ 134.936067][ T882] pantherlord: probe of 0003:0F30:0111.0007 failed with error -22 [ 134.967361][ T3516] usb 2-1: USB disconnect, device number 9 [ 135.006232][ T3591] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 135.110663][ T3591] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.192738][ T30] audit: type=1400 audit(1729593897.507:1168): avc: denied { map } for pid=3601 comm="syz.4.1042" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.209161][ T3591] F2FS-fs (loop3): invalid crc value [ 135.217064][ T30] audit: type=1400 audit(1729593897.507:1169): avc: denied { execute } for pid=3601 comm="syz.4.1042" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.223088][ T3591] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.301601][ T3611] loop2: detected capacity change from 0 to 16 [ 135.411568][ T3611] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.422103][ T3611] attempt to access beyond end of device [ 135.422103][ T3611] loop2: rw=0, want=32, limit=16 [ 135.434095][ T3611] attempt to access beyond end of device [ 135.434095][ T3611] loop2: rw=0, want=32, limit=16 [ 135.474484][ T3591] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.481562][ T3591] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.580788][ T3616] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 135.592257][ T3616] overlayfs: missing 'lowerdir' [ 136.662794][ T3639] loop2: detected capacity change from 0 to 256 [ 136.985378][ T2814] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.245799][ T2814] usb 1-1: Using ep0 maxpacket: 8 [ 137.365498][ T2814] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 137.382440][ T2814] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 137.401871][ T2814] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.525464][ T2814] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 137.534357][ T2814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.542178][ T2814] usb 1-1: SerialNumber: syz [ 137.565628][ T3635] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.585679][ T2814] hub 1-1:1.0: bad descriptor, ignoring hub [ 137.591435][ T2814] hub: probe of 1-1:1.0 failed with error -5 [ 137.745860][ T3656] loop1: detected capacity change from 0 to 512 [ 137.775427][ T3658] loop4: detected capacity change from 0 to 512 [ 137.785732][ T3635] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.797570][ T3656] EXT4-fs (loop1): Ignoring removed orlov option [ 137.803900][ T3656] EXT4-fs (loop1): Test dummy encryption mode enabled [ 137.816727][ T3658] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 137.886058][ T3656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 137.896240][ T3656] System zones: 1-12 [ 137.906454][ T3656] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1055: casefold flag without casefold feature [ 137.919184][ T3656] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1055: couldn't read orphan inode 15 (err -117) [ 137.931173][ T3656] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 137.999679][ T3663] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 138.008217][ T3663] tipc: Enabled bearer , priority 10 [ 138.257543][ T3668] netlink: 'syz.1.1055': attribute type 4 has an invalid length. [ 138.366814][ T3670] loop3: detected capacity change from 0 to 16 [ 138.427924][ T3670] erofs: (device loop3): mounted with root inode @ nid 36. [ 138.437080][ T3670] attempt to access beyond end of device [ 138.437080][ T3670] loop3: rw=0, want=32, limit=16 [ 138.448971][ T3670] attempt to access beyond end of device [ 138.448971][ T3670] loop3: rw=0, want=32, limit=16 [ 138.966054][ T3673] loop1: detected capacity change from 0 to 40427 [ 139.016312][ T3673] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.024018][ T3673] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.034272][ T3673] F2FS-fs (loop1): invalid crc value [ 139.041355][ T3673] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.099614][ T3673] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 139.106526][ T3673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.435695][ T30] audit: type=1400 audit(1729593901.857:1170): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 139.852794][ T3699] loop4: detected capacity change from 0 to 2048 [ 139.868363][ T3699] EXT4-fs (loop4): Ignoring removed nobh option [ 139.994404][ T2814] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 140.012864][ T3699] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,mb_optimize_scan=0x0000000000000001,abort,,errors=continue. Quota mode: writeback. [ 140.029225][ T3699] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038 (0x7fffffff) [ 140.035578][ T2814] usb 1-1: USB disconnect, device number 5 [ 140.204946][ T30] audit: type=1400 audit(1729593902.627:1171): avc: denied { mounton } for pid=3698 comm="syz.4.1064" path="/187/file0/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.374192][ T3711] attempt to access beyond end of device [ 140.374192][ T3711] loop4: rw=2051, want=2470606544, limit=2048 [ 141.617852][ T3738] loop1: detected capacity change from 0 to 512 [ 141.676548][ T3738] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.757911][ T289] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 141.773434][ T3738] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038 (0x7fffffff) [ 141.783681][ T3732] loop0: detected capacity change from 0 to 40427 [ 141.795615][ T289] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 141.813048][ T8] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 141.974733][ T3746] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 141.989157][ T3746] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 142.001774][ T3746] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.001774][ T3746] [ 142.011230][ T3746] EXT4-fs (loop1): Total free blocks count 0 [ 142.017035][ T3746] EXT4-fs (loop1): Free/Dirty block details [ 142.022763][ T3746] EXT4-fs (loop1): free_blocks=65280 [ 142.027907][ T3746] EXT4-fs (loop1): dirty_blocks=23 [ 142.032814][ T3746] EXT4-fs (loop1): Block reservation details [ 142.038646][ T3746] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 142.058355][ T2814] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.086018][ T3732] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 142.135479][ T3732] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 142.144354][ T3732] F2FS-fs (loop0): invalid crc value [ 142.150792][ T3732] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.176852][ T8] tipc: Disabling bearer [ 142.183187][ T8] tipc: Left network mode [ 142.187934][ T3732] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 142.194843][ T3732] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 142.270764][ T3732] overlayfs: missing 'lowerdir' [ 142.281221][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.288555][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.295927][ T3752] device bridge_slave_0 entered promiscuous mode [ 142.302898][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.309935][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.316880][ T2814] usb 4-1: Using ep0 maxpacket: 8 [ 142.317627][ T3752] device bridge_slave_1 entered promiscuous mode [ 142.379657][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.386514][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.393627][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.400408][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.432606][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.441093][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.445467][ T2814] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 142.460049][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.481643][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.489811][ T2814] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 142.490335][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.499623][ T2814] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.506330][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.509258][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.534372][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.541237][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.568757][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.576585][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.591458][ T3762] loop2: detected capacity change from 0 to 512 [ 142.603113][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.611643][ T2814] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 142.611662][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.615109][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.620541][ T2814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.620563][ T2814] usb 4-1: SerialNumber: syz [ 142.635470][ T3736] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.637535][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.655698][ T2814] hub 4-1:1.0: bad descriptor, ignoring hub [ 142.663014][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.676140][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.680159][ T2814] hub: probe of 4-1:1.0 failed with error -5 [ 142.689607][ T3752] device veth0_vlan entered promiscuous mode [ 142.695860][ T30] audit: type=1400 audit(1729593905.127:1172): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.702615][ T3752] device veth1_macvtap entered promiscuous mode [ 142.727126][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.727373][ T3762] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.735250][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.745795][ T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.754072][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.760727][ T3762] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038 (0x7fffffff) [ 142.787873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.802079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.810529][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.818781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.831255][ T3769] binder: 3768:3769 ioctl c00c620f 20000340 returned -22 [ 142.888012][ T3736] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.898608][ T882] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.236468][ T8] device bridge_slave_1 left promiscuous mode [ 143.258566][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.278765][ T8] device bridge_slave_0 left promiscuous mode [ 143.310116][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.326020][ T8] device veth1_macvtap left promiscuous mode [ 143.332365][ T8] device veth0_vlan left promiscuous mode [ 143.505436][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.505443][ T882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.505468][ T882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.516471][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.536411][ T882] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 143.556052][ T882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.568699][ T882] usb 2-1: config 0 descriptor?? [ 143.740684][ T20] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 143.755100][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.781692][ T20] usb 1-1: config 0 descriptor?? [ 144.068185][ T882] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 144.266271][ T20] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 144.273024][ T20] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 144.275429][ T882] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 144.280631][ T20] arvo 0003:1E7D:30D4.0009: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 144.289502][ T882] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 144.314775][ T882] pyra: probe of 0003:1E7D:2CF6.0008 failed with error -71 [ 144.351497][ T882] usb 2-1: USB disconnect, device number 10 [ 144.544417][ T20] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 144.551669][ T20] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 144.558885][ T20] arvo: probe of 0003:1E7D:30D4.0009 failed with error -5 [ 144.693668][ T20] usb 1-1: USB disconnect, device number 6 [ 144.765661][ T2814] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 144.796854][ T2814] usb 4-1: USB disconnect, device number 9 [ 144.861667][ T3798] loop3: detected capacity change from 0 to 40427 [ 144.938799][ T3801] loop1: detected capacity change from 0 to 512 [ 144.955900][ T3798] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 144.963543][ T3798] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.972474][ T3798] F2FS-fs (loop3): invalid crc value [ 144.979110][ T3798] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.004701][ T3798] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 145.011671][ T3798] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.015583][ T3801] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.030065][ T3801] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038 (0x7fffffff) [ 145.166583][ T3798] overlayfs: missing 'lowerdir' [ 145.208034][ T3809] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 145.222483][ T3809] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 145.234657][ T3809] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.234657][ T3809] [ 145.244128][ T3809] EXT4-fs (loop1): Total free blocks count 0 [ 145.250384][ T3809] EXT4-fs (loop1): Free/Dirty block details [ 145.256116][ T3809] EXT4-fs (loop1): free_blocks=65280 [ 145.261243][ T3809] EXT4-fs (loop1): dirty_blocks=23 [ 145.266185][ T3809] EXT4-fs (loop1): Block reservation details [ 145.271959][ T3809] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 146.915391][ T3516] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.002723][ T3846] incfs: iterate_incfs_dir / -22 [ 147.175390][ T882] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 147.297929][ T3848] loop0: detected capacity change from 0 to 512 [ 147.348213][ T3848] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.358163][ T3516] usb 4-1: Using ep0 maxpacket: 16 [ 147.367214][ T3848] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 147.381783][ T3848] EXT4-fs (loop0): 1 truncate cleaned up [ 147.387339][ T3848] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.415573][ T882] usb 2-1: Using ep0 maxpacket: 8 [ 147.665474][ T882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 147.685472][ T3516] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.709349][ T882] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 147.729417][ T3857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 147.738184][ T3857] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1103'. [ 147.749482][ T3857] device bridge1 entered promiscuous mode [ 147.764889][ T882] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.855656][ T882] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 147.865489][ T882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.873483][ T882] usb 2-1: SerialNumber: syz [ 147.985440][ T3845] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.014884][ T882] hub 2-1:1.0: bad descriptor, ignoring hub [ 148.026037][ T3862] loop0: detected capacity change from 0 to 512 [ 148.026863][ T882] hub: probe of 2-1:1.0 failed with error -5 [ 148.055548][ T3516] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 148.064556][ T3516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.072399][ T3516] usb 4-1: Product: syz [ 148.076379][ T3516] usb 4-1: Manufacturer: syz [ 148.080780][ T3516] usb 4-1: SerialNumber: syz [ 148.085816][ T3516] usb 4-1: config 0 descriptor?? [ 148.105753][ T3862] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 148.126446][ T3862] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 148.134029][ T3862] System zones: 0-2, 18-18, 34-34 [ 148.140257][ T3862] EXT4-fs (loop0): 1 orphan inode deleted [ 148.145864][ T3862] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 148.167665][ T3862] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 148.204413][ T30] audit: type=1400 audit(1729593910.627:1173): avc: denied { map } for pid=3865 comm="syz.4.1107" path="socket:[27091]" dev="sockfs" ino=27091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.228091][ T3845] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.233237][ T30] audit: type=1400 audit(1729593910.657:1174): avc: denied { read } for pid=3865 comm="syz.4.1107" path="socket:[27091]" dev="sockfs" ino=27091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.415457][ T3516] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 148.422773][ T3516] usb 4-1: No valid video chain found. [ 148.437397][ T3516] usb 4-1: USB disconnect, device number 10 [ 148.785284][ T3874] loop2: detected capacity change from 0 to 16 [ 148.876555][ T3874] erofs: (device loop2): mounted with root inode @ nid 36. [ 148.890333][ T3874] attempt to access beyond end of device [ 148.890333][ T3874] loop2: rw=0, want=32, limit=16 [ 148.903698][ T3874] attempt to access beyond end of device [ 148.903698][ T3874] loop2: rw=0, want=32, limit=16 [ 149.452113][ T3880] loop3: detected capacity change from 0 to 128 [ 149.776465][ T3893] loop4: detected capacity change from 0 to 512 [ 150.526887][ T3901] loop1: detected capacity change from 0 to 512 [ 150.535452][ T882] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 150.546716][ T3893] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.565672][ T3893] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 150.616578][ T3893] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1115: Directory hole found for htree leaf block 0 [ 150.631293][ T3901] EXT4-fs (loop1): 1 orphan inode deleted [ 150.636887][ T3901] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.653724][ T3893] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1115: Directory hole found for htree leaf block 0 [ 150.669787][ T3901] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038 (0x7fffffff) [ 150.701385][ T3893] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1115: Directory hole found for htree leaf block 0 [ 150.831471][ T882] usb 2-1: USB disconnect, device number 11 [ 150.952603][ T3919] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1115: Directory hole found for htree leaf block 0 [ 151.475273][ T882] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.592412][ T3932] loop0: detected capacity change from 0 to 16 [ 151.878832][ T3932] erofs: (device loop0): mounted with root inode @ nid 36. [ 151.890126][ T3932] attempt to access beyond end of device [ 151.890126][ T3932] loop0: rw=0, want=32, limit=16 [ 151.902353][ T3932] attempt to access beyond end of device [ 151.902353][ T3932] loop0: rw=0, want=32, limit=16 [ 151.966261][ T30] audit: type=1400 audit(1729593914.397:1175): avc: denied { remount } for pid=3938 comm="syz.2.1127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 152.156238][ T882] usb 5-1: Using ep0 maxpacket: 16 [ 152.295734][ T882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.305778][ T320] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.475479][ T882] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 152.484391][ T882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.492308][ T882] usb 5-1: Product: syz [ 152.988176][ T3957] loop0: detected capacity change from 0 to 1024 [ 153.016005][ T882] usb 5-1: Manufacturer: syz [ 153.020479][ T882] usb 5-1: SerialNumber: syz [ 153.037753][ T882] usb 5-1: config 0 descriptor?? [ 153.065378][ T320] usb 3-1: Using ep0 maxpacket: 8 [ 153.103160][ T3957] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.232261][ T320] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 153.285551][ T320] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 153.295617][ T320] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.355874][ T882] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 153.418346][ T882] usb 5-1: No valid video chain found. [ 153.424799][ T882] usb 5-1: USB disconnect, device number 13 [ 153.430807][ T320] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 153.439733][ T320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.448575][ T320] usb 3-1: SerialNumber: syz [ 153.465558][ T3945] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.490903][ T320] hub 3-1:1.0: bad descriptor, ignoring hub [ 153.499416][ T320] hub: probe of 3-1:1.0 failed with error -5 [ 153.685868][ T3945] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.716720][ T3980] loop1: detected capacity change from 0 to 512 [ 153.798062][ T3980] EXT4-fs (loop1): 1 orphan inode deleted [ 153.803599][ T3980] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.814583][ T3980] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038 (0x7fffffff) [ 153.952921][ T3985] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 153.964805][ T3985] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 155.439175][ T3997] loop3: detected capacity change from 0 to 16 [ 155.676602][ T3997] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 156.775486][ T320] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 156.815684][ T320] usb 3-1: USB disconnect, device number 11 [ 156.826059][ T4012] device veth0_vlan left promiscuous mode [ 156.832023][ T4012] device veth0_vlan entered promiscuous mode [ 156.843361][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.857509][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.892243][ T4032] loop1: detected capacity change from 0 to 512 [ 156.901514][ T4025] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 156.910265][ T4025] device syzkaller0 entered promiscuous mode [ 156.929742][ T4032] EXT4-fs (loop1): Test dummy encryption mode enabled [ 156.937224][ T4032] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.1157: casefold flag without casefold feature [ 156.950005][ T4032] EXT4-fs (loop1): get root inode failed [ 156.955600][ T4032] EXT4-fs (loop1): mount failed [ 157.465513][ T882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 157.676216][ T4042] tipc: Started in network mode [ 157.680880][ T4042] tipc: Node identity 101, cluster identity 4711 [ 157.687138][ T4042] tipc: Node number set to 257 [ 157.691881][ T4042] tipc: Cannot configure node identity twice [ 157.747423][ T4044] loop3: detected capacity change from 0 to 16 [ 157.775409][ T882] usb 5-1: Using ep0 maxpacket: 16 [ 157.781488][ T4044] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 157.905718][ T882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.935742][ T4047] loop0: detected capacity change from 0 to 512 [ 157.976885][ T4047] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 157.989232][ T4047] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 158.134093][ T882] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 158.157069][ T882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.175511][ T882] usb 5-1: Product: syz [ 158.179609][ T882] usb 5-1: Manufacturer: syz [ 158.184023][ T882] usb 5-1: SerialNumber: syz [ 158.265424][ T882] usb 5-1: config 0 descriptor?? [ 158.274437][ T4056] xt_hashlimit: size too large, truncated to 1048576 [ 158.625612][ T882] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 158.632373][ T882] usb 5-1: No valid video chain found. [ 158.643031][ T882] usb 5-1: USB disconnect, device number 14 [ 158.765511][ T294] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.085461][ T294] usb 2-1: Using ep0 maxpacket: 8 [ 159.235483][ T294] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 159.246156][ T294] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 159.258150][ T294] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.450541][ T1447] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.469530][ T294] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 159.478453][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.486606][ T294] usb 2-1: SerialNumber: syz [ 159.505435][ T4060] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 159.525703][ T294] hub 2-1:1.0: bad descriptor, ignoring hub [ 159.531427][ T294] hub: probe of 2-1:1.0 failed with error -5 [ 159.711282][ T4087] loop3: detected capacity change from 0 to 16 [ 159.736454][ T1447] usb 1-1: Using ep0 maxpacket: 8 [ 159.784642][ T4060] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 159.835486][ T4087] erofs: (device loop3): mounted with root inode @ nid 36. [ 159.995446][ T1447] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 160.064130][ T4094] loop2: detected capacity change from 0 to 16 [ 160.099005][ T1447] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 160.116661][ T4094] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 160.207822][ T1447] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 160.263171][ T1447] usb 1-1: config 250 has no interface number 0 [ 160.274991][ T1447] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 160.286423][ T1447] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 160.296741][ T1447] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.307042][ T1447] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 160.317344][ T1447] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 161.244467][ T1447] usb 1-1: config 250 interface 228 has no altsetting 0 [ 161.261254][ T4109] loop3: detected capacity change from 0 to 128 [ 161.486202][ T1447] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 161.539075][ T1447] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 161.589253][ T1447] usb 1-1: Product: syz [ 161.593264][ T1447] usb 1-1: SerialNumber: syz [ 161.853478][ T1447] hub 1-1:250.228: bad descriptor, ignoring hub [ 161.865396][ T1447] hub: probe of 1-1:250.228 failed with error -5 [ 161.926402][ T1447] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 162.025500][ T294] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 162.055626][ T294] usb 2-1: USB disconnect, device number 12 [ 162.130768][ T30] audit: type=1400 audit(1729593924.557:1176): avc: denied { read write } for pid=4071 comm="syz.0.1168" name="lp0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 162.180577][ T30] audit: type=1400 audit(1729593924.577:1177): avc: denied { open } for pid=4071 comm="syz.0.1168" path="/dev/usb/lp0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 162.317265][ T4120] loop1: detected capacity change from 0 to 40427 [ 162.379012][ T4129] loop2: detected capacity change from 0 to 512 [ 162.385731][ T4120] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 162.399996][ T4120] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 162.488284][ T4129] EXT4-fs (loop2): Ignoring removed orlov option [ 162.518824][ T4129] EXT4-fs (loop2): Test dummy encryption mode enabled [ 162.574255][ T4129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 162.589055][ T4129] System zones: 1-12 [ 162.593815][ T4120] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.595929][ T4129] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1184: casefold flag without casefold feature [ 162.612597][ T4129] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1184: couldn't read orphan inode 15 (err -117) [ 162.624499][ T4129] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 162.626967][ T4120] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 162.653595][ T4120] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.665566][ T4072] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 162.710412][ T30] audit: type=1400 audit(1729593925.137:1178): avc: denied { ioctl } for pid=4121 comm="syz.4.1182" path="socket:[27425]" dev="sockfs" ino=27425 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.741822][ T4138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 163.038139][ T4141] xt_bpf: check failed: parse error [ 163.239871][ T4139] netlink: 'syz.2.1184': attribute type 4 has an invalid length. [ 163.264149][ T4139] netlink: 'syz.2.1184': attribute type 4 has an invalid length. [ 163.327304][ T4142] overlayfs: failed to resolve './file1': -2 [ 163.893901][ T4151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'. [ 164.253415][ T4153] loop2: detected capacity change from 0 to 16 [ 164.295677][ T4153] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.795373][ T294] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 165.035384][ T294] usb 3-1: Using ep0 maxpacket: 8 [ 165.155490][ T294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 165.166197][ T294] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 165.176051][ T294] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 165.184425][ T4167] loop4: detected capacity change from 0 to 256 [ 165.265480][ T294] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 165.274453][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.284150][ T294] usb 3-1: SerialNumber: syz [ 165.305452][ T4162] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 165.331738][ T294] hub 3-1:1.0: bad descriptor, ignoring hub [ 165.337901][ T294] hub: probe of 3-1:1.0 failed with error -5 [ 165.605887][ T4162] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 166.409304][ T4182] loop3: detected capacity change from 0 to 512 [ 166.478185][ T4182] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.1196: corrupted inode contents [ 166.491605][ T4182] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #3: comm syz.3.1196: mark_inode_dirty error [ 166.504140][ T4182] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.1196: corrupted inode contents [ 166.515988][ T4182] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1196: mark_inode_dirty error [ 166.527314][ T4182] Quota error (device loop3): write_blk: dquota write failed [ 166.534759][ T4182] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 166.544629][ T4182] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.1196: Failed to acquire dquot type 0 [ 166.557234][ T4182] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.1196: corrupted inode contents [ 166.569191][ T4182] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #16: comm syz.3.1196: mark_inode_dirty error [ 166.580580][ T4182] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.1196: corrupted inode contents [ 166.592410][ T4182] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.1196: mark_inode_dirty error [ 166.603665][ T4182] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.1196: corrupted inode contents [ 166.615646][ T4182] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 166.624151][ T4182] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.1196: corrupted inode contents [ 166.636008][ T4182] EXT4-fs error (device loop3): ext4_truncate:4303: inode #16: comm syz.3.1196: mark_inode_dirty error [ 166.647156][ T4182] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 166.656745][ T4182] EXT4-fs (loop3): 1 truncate cleaned up [ 166.662223][ T4182] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.673094][ T4182] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038 (0x7fffffff) [ 167.035886][ T4193] loop4: detected capacity change from 0 to 256 [ 167.795294][ T4207] loop3: detected capacity change from 0 to 16 [ 167.847905][ T4207] erofs: (device loop3): mounted with root inode @ nid 36. [ 167.925742][ T294] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 168.030029][ T294] usb 3-1: USB disconnect, device number 12 [ 168.076229][ T4210] loop2: detected capacity change from 0 to 512 [ 168.214061][ T4210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.225025][ T4210] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038 (0x7fffffff) [ 168.484562][ T4226] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 168.498953][ T4226] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 168.511159][ T4226] EXT4-fs (loop2): This should not happen!! Data will be lost [ 168.511159][ T4226] [ 168.520609][ T4226] EXT4-fs (loop2): Total free blocks count 0 [ 168.526416][ T4226] EXT4-fs (loop2): Free/Dirty block details [ 168.532155][ T4226] EXT4-fs (loop2): free_blocks=65280 [ 168.537308][ T4226] EXT4-fs (loop2): dirty_blocks=23 [ 168.542196][ T4226] EXT4-fs (loop2): Block reservation details [ 168.548032][ T4226] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 169.195765][ T4072] usb 1-1: device firmware changed [ 169.237577][ T4232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'. [ 169.628801][ T1447] usb 1-1: USB disconnect, device number 7 [ 169.635819][ T1447] usblp0: removed [ 169.696329][ T386] tipc: Left network mode [ 170.012331][ T4250] loop2: detected capacity change from 0 to 1024 [ 170.072199][ T4250] EXT4-fs (loop2): Test dummy encryption mode enabled [ 170.081707][ T4250] EXT4-fs (loop2): Test dummy encryption mode enabled [ 170.088557][ T4250] EXT4-fs (loop2): Ignoring removed orlov option [ 170.098199][ T4250] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 170.130704][ T4250] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 170.816876][ T4259] loop4: detected capacity change from 0 to 16 [ 170.925178][ T4259] erofs: (device loop4): mounted with root inode @ nid 36. [ 171.200321][ T386] device bridge_slave_1 left promiscuous mode [ 171.248737][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.295492][ T386] device bridge_slave_0 left promiscuous mode [ 171.301642][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.309703][ T386] device veth1_macvtap left promiscuous mode [ 171.315927][ T386] device veth0_vlan left promiscuous mode [ 171.324961][ T4271] loop4: detected capacity change from 0 to 512 [ 171.386534][ T4271] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.397548][ T4271] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 171.623259][ T4280] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 171.637785][ T4280] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 171.649965][ T4280] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.649965][ T4280] [ 171.659441][ T4280] EXT4-fs (loop4): Total free blocks count 0 [ 171.665218][ T4280] EXT4-fs (loop4): Free/Dirty block details [ 171.670967][ T4280] EXT4-fs (loop4): free_blocks=65280 [ 171.676078][ T4280] EXT4-fs (loop4): dirty_blocks=23 [ 171.681014][ T4280] EXT4-fs (loop4): Block reservation details [ 171.686840][ T4280] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 172.684524][ T4292] loop1: detected capacity change from 0 to 256 [ 172.801623][ T4294] tipc: Started in network mode [ 172.806338][ T4294] tipc: Node identity 101, cluster identity 4711 [ 172.812452][ T4294] tipc: Node number set to 257 [ 172.817139][ T4294] tipc: Cannot configure node identity twice [ 172.850334][ T4292] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 172.863709][ T30] audit: type=1400 audit(1729593935.287:1179): avc: denied { rename } for pid=4291 comm="syz.1.1220" name="file0" dev="loop1" ino=1048633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.671141][ T4305] input: syz0 as /devices/virtual/input/input5 [ 174.195440][ T30] audit: type=1400 audit(1729593936.617:1180): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=721 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.245958][ T30] audit: type=1400 audit(1729593936.617:1181): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=721 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.269211][ T30] audit: type=1400 audit(1729593936.617:1182): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=721 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.395373][ T3516] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.727055][ T4322] loop1: detected capacity change from 0 to 16 [ 174.818281][ T4322] erofs: (device loop1): mounted with root inode @ nid 36. [ 174.868844][ T3516] usb 4-1: Using ep0 maxpacket: 32 [ 174.995415][ T3516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.006111][ T3516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.015660][ T3516] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 175.024482][ T3516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.033162][ T3516] usb 4-1: config 0 descriptor?? [ 175.505469][ T4327] loop2: detected capacity change from 0 to 512 [ 175.506115][ T4329] loop4: detected capacity change from 0 to 512 [ 175.526281][ T3516] greenasia 0003:0E8F:0012.000A: item fetching failed at offset 0/3 [ 175.534357][ T3516] greenasia 0003:0E8F:0012.000A: parse failed [ 175.540434][ T3516] greenasia: probe of 0003:0E8F:0012.000A failed with error -22 [ 175.576533][ T4327] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.582426][ T4329] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 175.587729][ T4327] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038 (0x7fffffff) [ 175.603503][ T4329] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff) [ 176.228177][ T4341] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 176.242755][ T4341] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 176.254955][ T4341] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.254955][ T4341] [ 176.264404][ T4341] EXT4-fs (loop2): Total free blocks count 0 [ 176.270223][ T4341] EXT4-fs (loop2): Free/Dirty block details [ 176.275944][ T4341] EXT4-fs (loop2): free_blocks=65280 [ 176.281075][ T4341] EXT4-fs (loop2): dirty_blocks=23 [ 176.286021][ T4341] EXT4-fs (loop2): Block reservation details [ 176.291816][ T4341] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 177.172507][ T20] usb 4-1: USB disconnect, device number 11 [ 178.423181][ T4361] loop1: detected capacity change from 0 to 512 [ 178.478443][ T4361] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 178.496505][ T4361] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 178.504454][ T4361] System zones: 0-2, 18-18, 34-34 [ 178.512031][ T4361] EXT4-fs (loop1): 1 orphan inode deleted [ 178.518155][ T4361] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 178.539653][ T4361] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038 (0x7fffffff) [ 180.061739][ T4389] loop3: detected capacity change from 0 to 16 [ 180.133322][ T4388] loop2: detected capacity change from 0 to 512 [ 180.345725][ T4389] erofs: (device loop3): mounted with root inode @ nid 36. [ 180.368694][ T4388] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.379902][ T4388] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038 (0x7fffffff) [ 181.145790][ T4396] loop1: detected capacity change from 0 to 256 [ 181.147581][ T4400] loop3: detected capacity change from 0 to 512 [ 181.231472][ T4396] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 182.236805][ T4402] loop4: detected capacity change from 0 to 40427 [ 182.244908][ T4400] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.255966][ T4400] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038 (0x7fffffff) [ 182.267840][ T4402] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 182.275034][ T4402] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 182.291427][ T4402] F2FS-fs (loop4): invalid crc value [ 182.297793][ T4402] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.336416][ T4402] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 182.344432][ T4402] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.456327][ T4413] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 182.470769][ T4413] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 182.482948][ T4413] EXT4-fs (loop3): This should not happen!! Data will be lost [ 182.482948][ T4413] [ 182.492412][ T4413] EXT4-fs (loop3): Total free blocks count 0 [ 182.498208][ T4413] EXT4-fs (loop3): Free/Dirty block details [ 182.503935][ T4413] EXT4-fs (loop3): free_blocks=65280 [ 182.509068][ T4413] EXT4-fs (loop3): dirty_blocks=23 [ 182.513992][ T4413] EXT4-fs (loop3): Block reservation details [ 182.519822][ T4413] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 183.246028][ T1447] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.526587][ T1447] usb 3-1: Using ep0 maxpacket: 8 [ 183.655435][ T1447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.666115][ T1447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.675678][ T1447] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 183.684499][ T1447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.693238][ T1447] usb 3-1: config 0 descriptor?? [ 184.176722][ T1447] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 184.183943][ T1447] hid-picolcd 0003:04D8:F002.000B: item fetching failed at offset 5/7 [ 184.192100][ T1447] hid-picolcd 0003:04D8:F002.000B: device report parse failed [ 184.199394][ T1447] hid-picolcd: probe of 0003:04D8:F002.000B failed with error -22 [ 184.268325][ T4430] loop3: detected capacity change from 0 to 512 [ 184.366308][ T4430] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 184.376750][ T1447] usb 3-1: USB disconnect, device number 13 [ 184.386458][ T4430] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 185.012870][ T4430] System zones: 0-2, 18-18, 34-34 [ 185.091322][ T4430] EXT4-fs (loop3): 1 orphan inode deleted [ 185.099593][ T4430] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 185.177204][ T4430] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038 (0x7fffffff) [ 187.305724][ T4459] loop2: detected capacity change from 0 to 512 [ 187.312163][ T4461] loop3: detected capacity change from 0 to 16 [ 187.366951][ T4461] erofs: (device loop3): mounted with root inode @ nid 36. [ 187.439430][ T4459] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.450286][ T4459] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038 (0x7fffffff) [ 187.975337][ T4478] loop3: detected capacity change from 0 to 16 [ 188.423736][ T30] audit: type=1326 audit(1729593950.817:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.449154][ T4478] erofs: (device loop3): mounted with root inode @ nid 36. [ 188.559095][ T4476] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 188.568875][ T4476] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 188.581355][ T4476] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 188.594202][ T4476] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 188.599874][ T30] audit: type=1326 audit(1729593950.817:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.603445][ T4476] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 188.626861][ T30] audit: type=1326 audit(1729593950.817:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.663206][ T4476] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 188.709585][ T30] audit: type=1326 audit(1729593950.817:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.735690][ T30] audit: type=1326 audit(1729593950.817:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.760674][ T30] audit: type=1326 audit(1729593950.827:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.784077][ T30] audit: type=1326 audit(1729593950.827:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.807486][ T30] audit: type=1326 audit(1729593950.827:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.831001][ T30] audit: type=1326 audit(1729593950.827:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 188.854310][ T30] audit: type=1326 audit(1729593950.827:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2179c2fff9 code=0x7ffc0000 [ 189.761845][ T4486] loop1: detected capacity change from 0 to 128 [ 189.766758][ T4487] loop4: detected capacity change from 0 to 512 [ 189.774433][ T4491] loop3: detected capacity change from 0 to 512 [ 189.814984][ T4491] EXT4-fs (loop3): 1 orphan inode deleted [ 189.820610][ T4491] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.835294][ T4491] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038 (0x7fffffff) [ 189.835915][ T4487] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 189.855194][ T4486] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.865925][ T4486] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 189.876345][ T4487] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 189.963457][ T4487] System zones: 0-2, 18-18, 34-34 [ 189.980798][ T4487] EXT4-fs (loop4): 1 orphan inode deleted [ 189.989836][ T4487] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 190.243503][ T4487] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=0 req=1206 state=1 status=67 (errno 9: Bad file descriptor) [ 191.959311][ T386] tipc: Left network mode [ 192.846240][ T386] device bridge_slave_1 left promiscuous mode [ 192.852393][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.859768][ T386] device bridge_slave_0 left promiscuous mode [ 192.865763][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.873384][ T386] device veth1_macvtap left promiscuous mode [ 192.879206][ T386] device veth0_vlan left promiscuous mode [ 193.487993][ T386] tipc: Left network mode [ 193.492565][ T386] tipc: Left network mode [ 193.497324][ T386] tipc: Left network mode [ 194.446249][ T386] device bridge_slave_1 left promiscuous mode [ 194.452163][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.459512][ T386] device bridge_slave_0 left promiscuous mode [ 194.465517][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.473146][ T386] device bridge_slave_1 left promiscuous mode [ 194.479167][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.486397][ T386] device bridge_slave_0 left promiscuous mode [ 194.492290][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.500344][ T386] device bridge_slave_1 left promiscuous mode [ 194.506303][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.513352][ T386] device bridge_slave_0 left promiscuous mode [ 194.519435][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.527340][ T386] device veth1_macvtap left promiscuous mode [ 194.533129][ T386] device veth0_vlan left promiscuous mode [ 194.538977][ T386] device veth1_macvtap left promiscuous mode [ 194.544763][ T386] device veth0_vlan left promiscuous mode [ 194.550582][ T386] device veth1_macvtap left promiscuous mode